0d83b103cc0023b121aad7abd2216db15e65cb6455c859aeb1b69b69fd9cf186 | Triage

Sharing

General

Target

2024-11-21_f651d7d2017cfb641e7da0a08c9bbc06_cryptolocker
Size

44KB
Sample

241121-lpgtfsvqfn
MD5

f651d7d2017cfb641e7da0a08c9bbc06
SHA1

aa0bf7ceae369af10f5dc1d78d9edac0c48b641b
SHA256

0d83b103cc0023b121aad7abd2216db15e65cb6455c859aeb1b69b69fd9cf186
SHA512

bbae5229fceb71bca028ba36fa980e673cc901f5cfd0d59dc642114c375ea5a5812bb6b4a91ef4fb96aa9c85e8fb5b40657b84febf29e3b273e0ae82d06adade
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TWu:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLP

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_f651d7d2017cfb641e7da0a08c9bbc06_cryptolocker
- Size
  
  44KB
- MD5
  
  f651d7d2017cfb641e7da0a08c9bbc06
- SHA1
  
  aa0bf7ceae369af10f5dc1d78d9edac0c48b641b
- SHA256
  
  0d83b103cc0023b121aad7abd2216db15e65cb6455c859aeb1b69b69fd9cf186
- SHA512
  
  bbae5229fceb71bca028ba36fa980e673cc901f5cfd0d59dc642114c375ea5a5812bb6b4a91ef4fb96aa9c85e8fb5b40657b84febf29e3b273e0ae82d06adade
- SSDEEP
  
  768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TWu:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLP
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2